Privacy Policy
This policy explains how we handle personal information when you use the Finalvue website and app (the “Service”). We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using the Service you agree to this policy. If you do not agree, please do not use the Service.
1. What we collect
- Account details: your email address, a securely hashed password (we never see or store your actual password), and your account settings.
- Payment details: payments are handled by Stripe. We do not receive or store your full card number. We keep a record of what you bought, when and how much.
- Your designs: room layouts, measurements, tile and fixture choices. Designs are saved on your own device. When you request a photo or video, the design and a 3D model of it are sent to our rendering provider only to produce that image, and are not kept afterwards.
- Usage records: for each render, the date and time, type and size of render, how long it took and what it cost us, your device type (for example “iPhone”), your country (from your internet connection), and an anonymous random ID stored in a cookie. We do not record your name or email with these unless you have an account.
- Security records: for each device you sign in on, a random device ID, and scrambled codes made from that device ID and your internet address (we don't keep the address itself in these records). We use them to manage your signed-in devices and allow one free image per person. Failed sign-in attempts are recorded with your internet address, so we can limit them and be alerted to misuse.
- Reports and suggestions: if you use “Report a fault · Suggest a feature”, your message, any email you give, your device type and internet address, and a link holding the design you were working on, if you include it.
- Messages you send us, through Messages in the app or by email, including any photos you attach.
We do not collect your precise location, contacts, camera, microphone, or any sensitive information (such as health or financial details beyond payment records). Please do not put personal information about other people (for example a client’s name or address) into design names.
2. Why we collect it
- To provide the Service: show your designs, produce renders, keep your account and credits working.
- To charge correctly and keep records the law requires (for example tax records).
- To keep the Service secure and prevent misuse, fraud and excessive use (for example limiting sign-in attempts and render volumes).
- To understand overall usage and costs so we can improve the Service (only in summary form).
- To reply to you when you contact us.
We will not use your information for any other purpose unless you agree or the law requires or permits it. We do not use your information for automated decisions that significantly affect you.
3. Cookies
We use only the cookies needed to run the Service: cookies that keep you signed in and recognise your device, and one anonymous random ID to tell visits apart in our render records. We do not use advertising, tracking or social media cookies, and we do not use third-party analytics. Your browser also stores your designs and settings on your device; you can clear these in your browser settings at any time (this deletes designs saved only on that device).
4. Who we share it with
We never sell, rent or trade your personal information, and we never share it for marketing. We share it only with service providers who help us run the Service, and only what they need:
- Cloudflare, Inc. – website hosting, security, the “verify you are human” check at sign-in, and our usage records.
- Supabase – stores accounts, sign-in details, credits and billing records, and messages.
- RunPod – the cloud computers that produce renders (receives your design for the length of the render only).
- Stripe – to process payments, plans and refunds.
- Resend – to send account and notice emails.
These providers are bound by their own privacy and security obligations. We may also disclose information if required by Australian law, a court or a government agency, or to protect the rights, safety or property of our users or us.
Product names and images shown in the app belong to their suppliers. Using the app does not share your information with those suppliers.
5. Overseas disclosure
Some of our providers store or process information outside Australia, including in the United States and other countries where they operate data centres. We take reasonable steps to make sure they handle your information consistently with the APPs.
6. How we protect it
- All connections are encrypted (HTTPS).
- Passwords are stored only as secure one-way hashes. Accounts are locked after 5 failed sign-in attempts.
- Access to our records is limited to the owner of the business and staff who need it for their role, and is protected by sign-in.
- Render files are delivered straight to your device and are not stored on our servers.
No system is perfectly secure. If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.
7. How long we keep it
- Render usage records: for as long as we need them to run and improve the Service. We review them at least every 24 months and delete or fully anonymise what we no longer need.
- Messages, reports and suggestions: while your account is open, or as long as we need them to deal with what you sent. Photos attached to messages are deleted after 30 days.
- Security records: while your account is open, or as long as needed to prevent misuse of the free image.
- Account details: while your account is open. To close your account, contact us; we delete your details within 30 days of your request (except what we must keep by law).
- Payment and tax records: 7 years, as Australian tax law requires.
- Designs on our servers: none – they stay on your device unless you share them.
- Finished photos and videos: kept in your browser on your own device for 7 days ("Past renders"), then deleted automatically. They're never kept on our servers.
8. Share links
When you create a share link, your design is packed inside the link itself; it is not stored on our servers. Anyone you give the link to can open a copy of that design. Only share links with people you trust, and do not include personal details in design names.
9. Your rights
You can ask us to: see the personal information we hold about you; correct it; delete it; or stop using it for a purpose you object to. You can also use the Service without an account to the extent the Service allows (anonymously or under a pseudonym). We will respond within 30 days and will not charge you for a reasonable request. We may need to confirm your identity first.
10. Children
The Service is not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
11. Complaints
If you have a concern about your privacy, please contact us first at [email protected]. We will reply within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner: oaic.gov.au, phone 1300 363 992.
12. Changes
We may update this policy. We will change the date at the top and, for significant changes, tell account holders by email or in the app before the change takes effect.
13. Contact
Bchara Homes Pty Ltd trading as Finalvue, ABN 68 612 530 533
51 Stanley Drive, Somerton VIC 3062
Email: [email protected]